$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: /YMzw5fA21+1R0V8ucWIFAnHHoLMOkH/sWFhNyqtVR4= Subject key identifier: 70:E4:F4:1B:AC:E9:F8:E3:EC:AD:E0:05:E6:B5:87:6D:1A:9C:E4:CE Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 0234 Signing time: Wed 05 Nov 2025 02:02:09 +0000 Manifest this update: Wed 05 Nov 2025 02:02:09 +0000 Manifest next update: Wed 12 Nov 2025 02:02:09 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: TOa7a++lzNwlLfttFAYygTfPfO2cmwIrDtZwsUnOIDU=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: Bi2+TUUi9KjDZhYC/bMb0EhL81rd7MZoY9SFjv5WPeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Nov 5 02:02:09 2025 GMT Not After : Nov 12 02:02:09 2025 GMT Subject: CN=690ab021-b64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:72:ef:d3:11:7c:5f:a2:01:42:8e:45:f0: 1f:c9:27:4e:d6:f1:5d:af:55:bb:25:37:7e:4e:4c: 96:bb:ca:40:1a:4a:93:dd:69:3e:34:41:db:fb:01: e6:1d:ae:bb:48:d6:7d:93:da:e8:ed:83:fa:43:a0: 27:bc:49:cd:29:fd:82:88:be:02:32:7d:49:89:ef: 60:52:f1:e3:ca:ea:37:b1:ad:95:a6:00:cc:43:67: 62:db:e8:c8:95:9e:0c:c3:75:cb:0e:9a:75:33:03: 82:6e:85:36:ae:78:47:68:f3:8b:99:fa:08:c7:cc: 77:06:e3:4c:6d:7d:2b:bd:d5:d8:71:34:6d:89:a8: 57:b2:6d:9e:8d:7d:7a:03:aa:44:91:3d:14:00:74: 7a:ac:08:4d:e6:f1:26:da:86:c4:b3:59:94:73:17: 00:d3:6c:63:ef:e7:62:28:7f:96:7c:cc:32:3f:8d: 55:bf:d5:44:61:29:6f:17:fb:9b:b6:77:de:71:cc: 0e:dc:74:aa:9c:4d:b3:a2:7a:37:d1:2e:8c:6f:97: 9e:4c:6d:b4:18:2f:e8:39:a3:d9:35:58:46:5d:93: 71:b8:68:5b:4f:7c:9a:75:c2:da:b7:39:1b:ab:d8: cf:5a:8b:f8:08:0d:bf:e1:13:76:24:8b:22:8d:d0: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:F4:1B:AC:E9:F8:E3:EC:AD:E0:05:E6:B5:87:6D:1A:9C:E4:CE X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:34:66:21:7d:4b:db:51:ca:f0:67:6a:fc:06:94:3d:71:fc: 2e:da:f0:03:5e:87:ab:e3:49:a3:76:16:86:5a:ae:74:61:c1: 4d:ec:64:8e:4d:20:be:a4:c2:b2:44:9e:88:8d:ad:5a:bd:ad: e1:c6:07:0f:43:5e:14:fa:4a:7b:43:00:bd:22:ed:65:6d:f4: 80:6f:6c:71:75:a8:8e:aa:a8:ae:a1:3b:4b:1a:0b:35:42:0e: da:f4:f8:50:5e:ca:1f:f6:45:fd:3c:6b:e6:5a:66:93:38:d9: 2c:84:39:e4:99:0d:b8:c4:72:51:40:d1:09:6e:ec:bd:d7:56: 93:3b:05:4d:04:ed:b0:ef:7c:cb:2a:93:a2:f4:11:39:f2:f2: a7:30:b3:d0:42:01:05:49:b8:96:25:d8:22:82:0b:30:a6:d1: 26:7b:1c:71:a9:ea:ea:66:65:8b:9e:b1:86:80:fb:d2:c8:be: 95:90:52:65:a5:54:ec:ce:77:07:33:54:70:bb:eb:36:8c:f5: 43:3f:49:b2:18:1d:17:53:65:f6:f4:9c:1e:60:7b:c0:fc:20: b5:ca:e0:a8:83:59:59:ad:e2:dc:6e:a5:3a:91:ac:66:a1:ea: 2e:47:48:48:ac:fc:f1:46:7b:ca:15:9f:49:1f:d5:7c:ad:7a: ff:e9:99:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjUxMTA1MDIwMjA5WhcNMjUxMTEyMDIwMjA5WjAYMRYwFAYD VQQDEw02OTBhYjAyMS1iNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXty79MRfF+iAUKORfAfySdO1vFdr1W7JTd+TkyWu8pAGkqT3Wk+NEHb+wHm Ha67SNZ9k9ro7YP6Q6AnvEnNKf2CiL4CMn1Jie9gUvHjyuo3sa2VpgDMQ2di2+jI lZ4Mw3XLDpp1MwOCboU2rnhHaPOLmfoIx8x3BuNMbX0rvdXYcTRtiahXsm2ejX16 A6pEkT0UAHR6rAhN5vEm2obEs1mUcxcA02xj7+diKH+WfMwyP41Vv9VEYSlvF/ub tnfeccwO3HSqnE2zono30S6Mb5eeTG20GC/oOaPZNVhGXZNxuGhbT3yadcLatzkb q9jPWov4CA2/4RN2JIsijdAkFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDk9Bus 6fjj7K3gBea1h20anOTOMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnNGYhfUvbUcrwZ2r8BpQ9cfwu2vADXoer40mjdhaGWq50YcFN7GSO TSC+pMKyRJ6Ija1ava3hxgcPQ14U+kp7QwC9Iu1lbfSAb2xxdaiOqqiuoTtLGgs1 Qg7a9PhQXsof9kX9PGvmWmaTONkshDnkmQ24xHJRQNEJbuy911aTOwVNBO2w73zL KpOi9BE58vKnMLPQQgEFSbiWJdgiggswptEmexxxqerqZmWLnrGGgPvSyL6VkFJl pVTszncHM1Rwu+s2jPVDP0myGB0XU2X29JweYHvA/CC1yuCog1lZreLcbqU6kaxm oeouR0hIrPzxRnvKFZ9JH9V8rXr/6ZmB -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:16 2025 by rpki-client